CVE-2013-1705

Publication date 6 August 2013

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Heap-based buffer underflow in the cryptojs_interpret_key_gen_type function in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Certificate Request Message Format (CRMF) request.

Status

Package Ubuntu Release Status
firefox 13.04 raring
Fixed 23.0+build2-0ubuntu0.13.04.1
12.10 quantal
Fixed 23.0+build2-0ubuntu0.12.10.1
12.04 LTS precise
Fixed 23.0+build2-0ubuntu0.12.04.1
10.04 LTS lucid Ignored end of life

References

Related Ubuntu Security Notices (USN)

    • USN-1924-1
    • Firefox vulnerabilities
    • 6 August 2013

Other references